a346070eb0564382e19162bb279cab4c_JaffaCakes118

General

Target
a346070eb0564382e19162bb279cab4c_JaffaCakes118
Size 7.4MB
Sample240613-bc1exssanr
SHA256 67fc479d63171499e439cd887c9643e69f7c85ff7e964ab6da138b982321beb9
MD5 a346070eb0564382e19162bb279cab4c
SHA1 4e6c8a16df75e4995fd4f22b16f396d2a765c7ee
SHA512 0522a00d12a1ce3e8f799d298a6e73f4849357b7ac958c507ba2340e658374156e2d248a3f989fdba27ded680aff6e88091ae3ba68316dc509f32d5416b4e4fe
SSDEEP 98304:ijXkzkDFlIvlebYyWIjq2RXjrkZcI64ar4CHG+2ZUSZXm3ckj8qeVDVkcI3raSBt:CXbjIxfIrRe4DHGl3m3ckQBV+VBt
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

a346070eb0564382e19162bb279cab4c_JaffaCakes118

.apk 7.4MB
alipay_msp.apk

.apk 354KB

a346070eb0564382e19162bb279cab4c_JaffaCakes118

SHA256 67fc479d63171499e439cd887c9643e69f7c85ff7e964ab6da138b982321beb9
MD5 a346070eb0564382e19162bb279cab4c
SHA1 4e6c8a16df75e4995fd4f22b16f396d2a765c7ee
SHA512 0522a00d12a1ce3e8f799d298a6e73f4849357b7ac958c507ba2340e658374156e2d248a3f989fdba27ded680aff6e88091ae3ba68316dc509f32d5416b4e4fe
SSDEEP 98304:ijXkzkDFlIvlebYyWIjq2RXjrkZcI64ar4CHG+2ZUSZXm3ckj8qeVDVkcI3raSBt:CXbjIxfIrRe4DHGl3m3ckQBV+VBt
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

net.souha.changedress

alipay_msp.apk

SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
MD5 89c04e1ebcd58eca6dd93211628ed0bc
SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

a346070eb0564382e19162bb279cab4c_JaffaCakes118

Permissions

android.permission.SEND_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

a346070eb0564382e19162bb279cab4c_JaffaCakes118

net.souha.changedress.MainActivity

.activity.IntegralActivity

com.estore.sms.iap.TypaySdkActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.tencent.android.tpush.service.XGPushService

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

safiap.framework.logreport.monitor.handler.LogreportHandler

net.souha.soupay.service.SouPayService

com.tencent.android.tpush.XGPushReceiver

safiap.framework.CheckUpdateReceiver

alipay_msp.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

Sharing

General

Malware Config

Signatures

File Explorer

a346070eb0564382e19162bb279cab4c_JaffaCakes118

net.souha.changedress.MainActivity

.activity.IntegralActivity

com.estore.sms.iap.TypaySdkActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.tencent.android.tpush.service.XGPushService

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

safiap.framework.logreport.monitor.handler.LogreportHandler

net.souha.soupay.service.SouPayService

com.tencent.android.tpush.XGPushReceiver

safiap.framework.CheckUpdateReceiver

alipay_msp.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

Android Permissions

a346070eb0564382e19162bb279cab4c_JaffaCakes118